What tool do they use for https://status.ipdata.co ?
I think I will use it in https://apility.io, a service that competes at some point with this.
Not sure I would trust Apility.
A cyber Intel engineer would perform a check in these lists to find out why this is a false positive. In this case there are bogons lists, and they are correct. Others, means that a popular malicious domain has changed the public ip to a private range. So the domain should be removed from them, something normally happens automatically in hours.